CVE-2019-2218

In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missing permission check

published December 6, 2019

CVSS
—
EPSS
0%
Percentile
4.1
In the wild
Unconfirmed
What it is

In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missing permission check. This could lead to local escalation of privilege by installing malicious packages with User execution privileges needed. User interaction is not needed for exploitation. Product: Android Versions: Android-8.0, Android-8.1, Android-9, and Android-10 Android ID: A-141169173

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00153 · 4.1th percentile
Published
2019-12-06T22:40Z
EPSS history
Timeline
  • 06 DEC 22:40Z
    In createSessionInternal of PackageInstallerService.java, there is a possible improper permission grant due to a missing permission check
    cvelistv5